Add v1.36 release notes

brandond · brandond · commit 4fba31485cc2 · 2026-05-07T23:42:07.000Z
Signed-off-by: Brad Davidson &lt;brad.davidson@rancher.com&gt;
diff --git a/.github/workflows/release-notes.yml b/.github/workflows/release-notes.yml
@@ -4,7 +4,7 @@ on:
   schedule:
     - cron: '0 6 * * 1' # every Monday at 6:00 AM
 env:
-  MINORS: "v1.32 v1.33 v1.34 v1.35"
+  MINORS: "v1.33 v1.34 v1.35 v1.36"
 permissions:
   contents: write
   pull-requests: write
diff --git a/docs/release-notes-old/v1.24.X.md b/docs/release-notes-old/v1.24.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 8
+sidebar_position: 9
 title: v1.24.X
 ---
 
diff --git a/docs/release-notes-old/v1.25.X.md b/docs/release-notes-old/v1.25.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 7
+sidebar_position: 8
 title: v1.25.X
 ---
 
diff --git a/docs/release-notes-old/v1.26.X.md b/docs/release-notes-old/v1.26.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 6
+sidebar_position: 7
 title: v1.26.X
 ---
 
diff --git a/docs/release-notes-old/v1.27.X.md b/docs/release-notes-old/v1.27.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 5
+sidebar_position: 6
 title: v1.27.X
 ---
 
diff --git a/docs/release-notes-old/v1.28.X.md b/docs/release-notes-old/v1.28.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 4
+sidebar_position: 5
 title: v1.28.X
 ---
 
diff --git a/docs/release-notes-old/v1.29.X.md b/docs/release-notes-old/v1.29.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 3
+sidebar_position: 4
 title: v1.29.X
 ---
 
diff --git a/docs/release-notes-old/v1.30.X.md b/docs/release-notes-old/v1.30.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 2
+sidebar_position: 3
 title: v1.30.X
 ---
 
diff --git a/docs/release-notes-old/v1.31.X.md b/docs/release-notes-old/v1.31.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 1
+sidebar_position: 2
 title: v1.31.X
 ---
 
diff --git a/docs/release-notes-old/v1.32.X.md b/docs/release-notes-old/v1.32.X.md
@@ -1,6 +1,6 @@
 ---
 hide_table_of_contents: true
-sidebar_position: 4
+sidebar_position: 1
 title: v1.32.X
 ---
 
diff --git a/docs/release-notes/v1.33.X.md b/docs/release-notes/v1.33.X.md
diff --git a/docs/release-notes/v1.34.X.md b/docs/release-notes/v1.34.X.md
diff --git a/docs/release-notes/v1.35.X.md b/docs/release-notes/v1.35.X.md
diff --git a/docs/release-notes/v1.36.X.md b/docs/release-notes/v1.36.X.md
@@ -0,0 +1,112 @@
+---
+hide_table_of_contents: true
+sidebar_position: 1
+title: v1.36.X
+---
+
+
+:::warning Upgrade Notice
+Before upgrading from earlier releases, be sure to read the Kubernetes [Urgent Upgrade Notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#urgent-upgrade-notes).
+:::
+
+| Version | Release date | Kubernetes | Kine | SQLite | Etcd | Containerd | Runc | Flannel | Metrics-server | Traefik | CoreDNS | Helm-controller | Local-path-provisioner  |
+| ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | ----- | -----  |
+| [v1.36.0+k3s1](v1.36.X.md#release-v1360k3s1) | May 06 2026| [v1.36.0](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#v1360) | [v0.14.16](https://github.com/k3s-io/kine/releases/tag/v0.14.16) | [3.51.3](https://sqlite.org/releaselog/3_51_3.html) | [v3.6.7-k3s1](https://github.com/k3s-io/etcd/releases/tag/v3.6.7-k3s1) | [v2.2.3-k3s1](https://github.com/k3s-io/containerd/releases/tag/v2.2.3-k3s1) | [v1.4.2](https://github.com/opencontainers/runc/releases/tag/v1.4.2) | [v0.28.4](https://github.com/flannel-io/flannel/releases/tag/v0.28.4) | [v0.8.1](https://github.com/kubernetes-sigs/metrics-server/releases/tag/v0.8.1) | [v3.6.13](https://github.com/traefik/traefik/releases/tag/v3.6.13) | [v1.14.2](https://github.com/coredns/coredns/releases/tag/v1.14.2) | [v0.17.1](https://github.com/k3s-io/helm-controller/releases/tag/v0.17.1) | [v0.0.35](https://github.com/rancher/local-path-provisioner/releases/tag/v0.0.35)  |
+
+<br />
+
+## Release [v1.36.0+k3s1](https://github.com/k3s-io/k3s/releases/tag/v1.36.0+k3s1)
+<!-- v1.36.0+k3s1 -->
+
+This release updates Kubernetes to v1.36.0, and fixes a number of issues.
+
+For more details on what's new, see the [Kubernetes release notes](https://github.com/kubernetes/kubernetes/blob/master/CHANGELOG/CHANGELOG-1.36.md#changelog-since-v1350).
+
+### Changes since v1.35.0+k3s1:
+
+* Add firewall section to check-config.sh [(#13234)](https://github.com/k3s-io/k3s/pull/13234)
+* Update golangci-lint and re-enable CI linting step [(#13343)](https://github.com/k3s-io/k3s/pull/13343)
+* Enable secret encryption on existing clusters [(#13370)](https://github.com/k3s-io/k3s/pull/13370)
+* Use Get, not Head for channel page [(#13402)](https://github.com/k3s-io/k3s/pull/13402)
+* Replace temporary etcd server with raw mvcc store access [(#13368)](https://github.com/k3s-io/k3s/pull/13368)
+* Remove flannel external-ip annotations when disabled [(#13431)](https://github.com/k3s-io/k3s/pull/13431)
+* Bump local path provisioner to v0.0.34 [(#13430)](https://github.com/k3s-io/k3s/pull/13430)
+* Publish GA images to staging registry [(#13438)](https://github.com/k3s-io/k3s/pull/13438)
+* Fix atomic write in WriteSubnetFile [(#13380)](https://github.com/k3s-io/k3s/pull/13380)
+* Bump expr-lang/expr [(#13440)](https://github.com/k3s-io/k3s/pull/13440)
+* Bump spegel to v0.6.0 [(#13198)](https://github.com/k3s-io/k3s/pull/13198)
+* Update longhorn version in integration test from v1.4.0 to v1.10.1 [(#13443)](https://github.com/k3s-io/k3s/pull/13443)
+* Remove download/generate from vulncheck [(#13445)](https://github.com/k3s-io/k3s/pull/13445)
+* Add Momentum Coach AI to K3S adopters list [(#13467)](https://github.com/k3s-io/k3s/pull/13467)
+  * NONE
+* Move to rootlesskit v2 [(#13486)](https://github.com/k3s-io/k3s/pull/13486)
+* Fix CVE-2025-54410: Update docker/docker to v25.0.13 [(#13473)](https://github.com/k3s-io/k3s/pull/13473)
+* Bump etcd to v3.6.7 [(#13495)](https://github.com/k3s-io/k3s/pull/13495)
+* Add Percona and Solanica to k3s adopters [(#13510)](https://github.com/k3s-io/k3s/pull/13510)
+* Fix restart of control-plane-only nodes attempting to reconcile from local datastore [(#13534)](https://github.com/k3s-io/k3s/pull/13534)
+* Fix spegel filter for wildcards [(#13527)](https://github.com/k3s-io/k3s/pull/13527)
+* Add IPv6 loopback to kubelet-serving cert [(#13532)](https://github.com/k3s-io/k3s/pull/13532)
+* Fix handling of empty token file [(#13529)](https://github.com/k3s-io/k3s/pull/13529)
+* Use channel.yaml instead of curling for stable for kubectl install [(#13531)](https://github.com/k3s-io/k3s/pull/13531)
+* Fix VPN node IP not being applied to kubelet [(#13457)](https://github.com/k3s-io/k3s/pull/13457)
+* Bump scorecard checkout to match all other versions [(#13568)](https://github.com/k3s-io/k3s/pull/13568)
+* Explicitly close mvcc backend to fix high CPU on initial etcd server after restart [(#13569)](https://github.com/k3s-io/k3s/pull/13569)
+* Support commit builds via GHA artifacts [(#13559)](https://github.com/k3s-io/k3s/pull/13559)
+* Bump metrics-server to v0.8.1 [(#13594)](https://github.com/k3s-io/k3s/pull/13594)
+* Add registry prefix to image-list file [(#13603)](https://github.com/k3s-io/k3s/pull/13603)
+* Fix removal of init node via annotation [(#13624)](https://github.com/k3s-io/k3s/pull/13624)
+* Make artifact URL prefix configurable [(#13367)](https://github.com/k3s-io/k3s/pull/13367)
+  * Added INSTALL_K3S_ARTIFACT_URL to donwload K3s binary from a different URL
+* Install binutils-gold only for arm64 builds [(#13654)](https://github.com/k3s-io/k3s/pull/13654)
+* Rootlesskit Revert + Test Fixes [(#13681)](https://github.com/k3s-io/k3s/pull/13681)
+* Improve resilience of datastore bootstrap reconcile from etcd [(#13677)](https://github.com/k3s-io/k3s/pull/13677)
+* Assign github.event to env first [(#13715)](https://github.com/k3s-io/k3s/pull/13715)
+* Config: Add default imports to containerd base templates [(#13680)](https://github.com/k3s-io/k3s/pull/13680)
+  * Containerd config generated by k3s now includes `imports` pointing at versioned drop-in directories: `config.toml.d` for v2 config and `config-v3.toml.d` for v3 (e.g. `/var/lib/rancher/k3s/agent/etc/containerd/config.toml.d/*.toml` and `.../config-v3.toml.d/*.toml`). Additional `.toml` files in the matching directory are automatically loaded by containerd. Use these directories for drop-in config (e.g. proxy plugins, custom runtimes, or debug settings) without modifying the main config or custom templates.
+* Add nix-snapshotter support to the embedded containerd [(#13676)](https://github.com/k3s-io/k3s/pull/13676)
+  * Add nix-snapshotter plugin to the embedded containerd to enable rootless k3s + nix-snapshotter
+* Do not create etcd name file if etcd is not in use [(#13727)](https://github.com/k3s-io/k3s/pull/13727)
+* Bump rancher/mirrored-coredns-coredns image version [(#13743)](https://github.com/k3s-io/k3s/pull/13743)
+* Update packages to remove unmaintained dependencies [(#13724)](https://github.com/k3s-io/k3s/pull/13724)
+* Save cluster state before reencyrpting secrets with newly created key [(#13764)](https://github.com/k3s-io/k3s/pull/13764)
+* Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 [(#13713)](https://github.com/k3s-io/k3s/pull/13713)
+* Bump github.com/docker/cli from 28.3.2+incompatible to 29.2.0+incompatible [(#13730)](https://github.com/k3s-io/k3s/pull/13730)
+* Build(deps): bump github.com/pion/dtls/v3 from 3.0.6 to 3.0.11 [(#13645)](https://github.com/k3s-io/k3s/pull/13645)
+* Use etcd-snapshot-retention as default for s3 if etcd-s3-retention is not set [(#13770)](https://github.com/k3s-io/k3s/pull/13770)
+* Install.sh: Simplify handling for fedora rpm-ostree based distributions [(#13712)](https://github.com/k3s-io/k3s/pull/13712)
+* Bump cni plugins to v1.9.1 [(#13817)](https://github.com/k3s-io/k3s/pull/13817)
+* Simplify snapshot compress/decompress logic [(#13826)](https://github.com/k3s-io/k3s/pull/13826)
+* Fix typo: overriden -> overridden in snapshot_handler.go [(#13847)](https://github.com/k3s-io/k3s/pull/13847)
+* Fix: typo in etcd membership error message [(#13848)](https://github.com/k3s-io/k3s/pull/13848)
+* Bump helm-controller for job race fix [(#13853)](https://github.com/k3s-io/k3s/pull/13853)
+* Add context to controller event recorders [(#13856)](https://github.com/k3s-io/k3s/pull/13856)
+* Dapper is kill [(#13860)](https://github.com/k3s-io/k3s/pull/13860)
+* Add sipgate to the list of adopters [(#13881)](https://github.com/k3s-io/k3s/pull/13881)
+* Add Rocket Technologies to the list of adopters [(#13890)](https://github.com/k3s-io/k3s/pull/13890)
+* Pin govulncheck GHA version [(#13887)](https://github.com/k3s-io/k3s/pull/13887)
+* Verify sha256sum for kubelet, vagrant zip and go binary [(#13889)](https://github.com/k3s-io/k3s/pull/13889)
+* Check the k3s-root sha256sum [(#13888)](https://github.com/k3s-io/k3s/pull/13888)
+* Build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 [(#13891)](https://github.com/k3s-io/k3s/pull/13891)
+* Fix reproducibility of embedded data tarball [(#13875)](https://github.com/k3s-io/k3s/pull/13875)
+* Build(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 [(#13837)](https://github.com/k3s-io/k3s/pull/13837)
+* Build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.2 to 2.12.6 [(#13852)](https://github.com/k3s-io/k3s/pull/13852)
+* Fix S3 test to account for change to s3mock [(#13906)](https://github.com/k3s-io/k3s/pull/13906)
+* Bump runc/spegel/helm-controller/kine [(#13909)](https://github.com/k3s-io/k3s/pull/13909)
+  * Bump runc to v1.4.2
+  * Bump spegel to v0.6.0-k3s2
+  * Bump helm-controller to v0.17.1
+  * Bump kine to v0.14.16
+* Fix embedded executor VPN config injection [(#13920)](https://github.com/k3s-io/k3s/pull/13920)
+* Bump containerd to v2.2.3 [(#13931)](https://github.com/k3s-io/k3s/pull/13931)
+* Bump flannel to v0.28.4 [(#13937)](https://github.com/k3s-io/k3s/pull/13937)
+* Immutable release changes [(#13902)](https://github.com/k3s-io/k3s/pull/13902)
+* Bump Traefik to 3.6.13 [(#13969)](https://github.com/k3s-io/k3s/pull/13969)
+* Switch from draft to pre-release [(#13951)](https://github.com/k3s-io/k3s/pull/13951)
+* Fix SANs added from comma-separated node-external-ip list [(#13989)](https://github.com/k3s-io/k3s/pull/13989)
+* Fix docker dualstack test [(#13994)](https://github.com/k3s-io/k3s/pull/13994)
+* Bump klipper-helm image for revision check fix [(#13995)](https://github.com/k3s-io/k3s/pull/13995)
+* Bump upstream to v1.36 [(#13986)](https://github.com/k3s-io/k3s/pull/13986)
+* Fix kubectl exec when using docker [(#14021)](https://github.com/k3s-io/k3s/pull/14021)
+
+
+-----
diff --git a/scripts/collect-all-release-notes.sh b/scripts/collect-all-release-notes.sh
@@ -5,7 +5,7 @@ function gen_md_link()
     echo "${release_link}"
 }
 
-MINORS=${MINORS:-"v1.32 v1.33 v1.34 v1.35"}
+MINORS=${MINORS:-"v1.33 v1.34 v1.35 v1.36"}
 
 for minor in $MINORS; do
     product=k3s
@@ -67,4 +67,4 @@ echo "Reordering old release notes in sidebar"
 for file in $(ls -r docs/release-notes-old/v1.*.X.md); do
     sed -i "s/^sidebar_position:.*/sidebar_position: $ITER/" "${file}"
     ITER=$((ITER+1))
-done
+done
